1. Este site usa cookies. Ao continuar a usar este site está a concordar com o nosso uso de cookies. Saber Mais.

Problema com o Windows XP

Discussão em 'Dúvidas e Suporte Técnico PC' iniciada por Scorpion_Angel, 26 de Maio de 2007. (Respostas: 9; Visualizações: 884)

  1. Boas pessoal , estou com um problema k já me esta a dar cabo da paciencia.
    Acontece k cada vez k me ligo a internet, passados uns minutos aparece a seguinte msg:
    " O Generic Host Process for Win32 Services encontrou um problema e vai ser encerrado..."
    e depois tenho k reiniciar o PC visto k nao consigo mais aceder à net.
    Alguem me explica k processo é este e como resolver este problema ?
     
  2. Scarecrow

    Scarecrow Power Member

    Penso que era o sasser ou algum worm do género que fazia isso.. tens o Windows com o SP2 e actualizado?

    Cumps
     
  3. yosei

    yosei Power Member

    tenho uma boa sugestão corre o spybot
     
  4. luikki

    luikki Power Member

    faz restauro do sistema para uma data anterior ao começo do problema....
    e depois verifica se naõ tens bicharada. usa o spybot....
    adicionalmente, podes instalar e correr o hijackthis e postar aqui a logfile.
     
  5. SIM tenho o Xp pro SP2 , mas sera mesmo de algum bichinho? vou usar o spybot e ja vos digo alguma coisa
     
  6. Aqui esta o logfile do hijackthis:


    "Logfile of HijackThis v1.99.1
    Scan saved at 22:27:38, on 26-05-2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\igfxtray.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\Programas\McAfee\MSK\MskAgent.exe
    C:\Programas\Mcafee\MWL\MWLGui.exe
    C:\Programas\SiteAdvisor\6066\SiteAdv.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Programas\Ficheiros comuns\McAfee\HackerWatch\HWAPI.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    c:\programas\ficheiros comuns\mcafee\mna\mcnasvc.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
    c:\PROGRA~1\FICHEI~1\mcafee\mcproxy\mcproxy.exe
    c:\PROGRA~1\FICHEI~1\mcafee\redirsvc\redirsvc.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    C:\Programas\McAfee\MPF\MPFSrv.exe
    C:\PROGRA~1\McAfee\MPS\mps.exe
    C:\Programas\McAfee\MSK\MskSrver.exe
    C:\Programas\SiteAdvisor\6066\SAService.exe
    C:\PROGRA~1\mcafee.com\agent\mcagent.exe
    C:\Programas\McAfee\MPS\mpsevh.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Programas\Mcafee\MWL\MwlSvc.exe
    C:\Programas\MSN Messenger\msnmsgr.exe
    C:\Programas\Internet Explorer\iexplore.exe
    C:\Programas\MSN Messenger\usnsvc.exe
    C:\DOCUME~1\MARCOD~1\DEFINI~1\Temp\Rar$EX00.953\HijackThis.exe
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pt/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hiperligações
    O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Programas\SiteAdvisor\6066\SiteAdv.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programas\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\programas\mcafee\virusscan\scriptcl.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: McAfee Popup Blocker - {C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - c:\PROGRA~1\mcafee\mps\mcpopup.dll
    O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Programas\SiteAdvisor\6066\SiteAdv.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [MskAgentexe] C:\Programas\McAfee\MSK\MskAgent.exe
    O4 - HKLM\..\Run: [MWLExe] C:\Programas\Mcafee\MWL\MWLGui.exe /Start
    O4 - HKLM\..\Run: [SiteAdvisor] C:\Programas\SiteAdvisor\6066\SiteAdv.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin9USA.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{0D0997E1-1A25-4833-A6FB-2C276AB499FD}: NameServer = 195.23.129.126,194.79.69.222
    O17 - HKLM\System\CCS\Services\Tcpip\..\{5C53E71D-D1D2-49A4-9C53-E525111BBE96}: NameServer = 195.23.129.126 194.79.69.222
    O17 - HKLM\System\CS1\Services\Tcpip\..\{0D0997E1-1A25-4833-A6FB-2C276AB499FD}: NameServer = 195.23.129.126,194.79.69.222
    O17 - HKLM\System\CS2\Services\Tcpip\..\{0D0997E1-1A25-4833-A6FB-2C276AB499FD}: NameServer = 195.23.129.126,194.79.69.222
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Programas\SiteAdvisor\6066\SiteAdv.dll
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHEI~1\McAfee\EmProxy\emproxy.exe
    O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Programas\Ficheiros comuns\McAfee\HackerWatch\HWAPI.exe
    O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\programas\ficheiros comuns\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHEI~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHEI~1\mcafee\redirsvc\redirsvc.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Programas\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
    O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Programas\McAfee\MSK\MskSrver.exe
    O23 - Service: McAfee Wireless Network Security Service (MWLSvc) - McAfee, Inc. - C:\Programas\Mcafee\MWL\MwlSvc.exe
    O23 - Service: NBService - Nero AG - C:\Programas\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Programas\SiteAdvisor\6066\SAService.exe
     
  7. Aqui esta o resultado do Spybot

    Parabéns!: Nenhuma ameaça imediata foi encontrada. ()


    --- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
    2005-05-31 blindman.exe (1.0.0.1)
    2005-05-31 SpybotSD.exe (1.4.0.3)
    2005-05-31 TeaTimer.exe (1.4.0.2)
    2007-05-26 unins000.exe (51.41.0.0)
    2005-05-31 Update.exe (1.4.0.0)
    2007-04-18 advcheck.dll (1.5.1.0)
    2005-05-31 aports.dll (2.1.0.0)
    2005-05-31 borlndmm.dll (7.0.4.453)
    2005-05-31 delphimm.dll (7.0.4.453)
    2005-05-31 SDHelper.dll (1.4.0.0)
    2007-01-02 Tools.dll (2.0.1.0)
    2005-05-31 UnzDll.dll (1.73.1.1)
    2005-05-31 ZipDll.dll (1.73.2.0)
    2007-05-23 Includes\Cookies.sbi
    2006-12-08 Includes\Dialer.sbi (*)
    2007-05-23 Includes\DialerC.sbi
    2007-04-04 Includes\Hijackers.sbi (*)
    2007-05-23 Includes\HijackersC.sbi
    2006-10-27 Includes\Keyloggers.sbi (*)
    2007-05-23 Includes\KeyloggersC.sbi
    2007-05-16 Includes\Malware.sbi
    2007-05-23 Includes\MalwareC.sbi
    2007-03-21 Includes\PUPS.sbi (*)
    2007-05-23 Includes\PUPSC.sbi
    2007-05-23 Includes\Revision.sbi
    2007-05-24 Includes\Security.sbi
    2007-05-23 Includes\SecurityC.sbi
    2007-05-23 Includes\Spybots.sbi
    2007-05-23 Includes\SpybotsC.sbi
    2005-02-17 Includes\Tracks.uti
    2007-05-16 Includes\Trojans.sbi
    2007-05-23 Includes\TrojansC.sbi
     
  8. e agora o k será?
     
  9. luikki

    luikki Power Member

    aparentemente não tens nenhum malware.
    o spybot descobriu alguma coisa? pergunta desnecessária...o spybot não tem nada...)
    arranca em modo de segurança e navega na net....presumivelmente não vais ter esse erro...
    se for assim, volta cá...
     

Partilhar esta Página